Serenity Serene
3 CVEs affecting Serenity Serene. Latest disclosed: 2023-04-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-31287 | High | 7.8 | 2023-04-27 | An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset… |
CVE-2023-31285 | Medium | 6.1 | 2023-04-27 | An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some specific file endings are not allowed, bu… |
CVE-2023-31286 | Medium | 5.3 | 2023-04-27 | An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of user… |